The (1) file_exists and (2) imap_reopen functions in PHP before 5.1.5 do not check for the safe_mode and open_basedir settings, which allows local users to bypass the settings. NOTE: the error_log function is covered by CVE-2006-3011, and the imap_open function is covered by CVE-2006-1017.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://www.php.net/release_5_1_5.php | x_refsource_CONFIRM |
| http://secunia.com/advisories/21768 | third-party-advisory x_refsource_SECUNIA |
| http://www.ubuntu.com/usn/usn-342-1 | vendor-advisory x_refsource_UBUNTU |
| http://secunia.com/advisories/22039 | third-party-advisory x_refsource_SECUNIA |
| http://www.mandriva.com/security/advisories?name=MDKSA-2006:162 | vendor-advisory x_refsource_MANDRIVA |
| http://www.securityfocus.com/bid/19582 | vdb-entry x_refsource_BID |
| http://secunia.com/advisories/21546 | third-party-advisory x_refsource_SECUNIA |
| http://www.vupen.com/english/advisories/2006/3318 | vdb-entry x_refsource_VUPEN |
| http://secunia.com/advisories/21842 | third-party-advisory x_refsource_SECUNIA |
| http://www.novell.com/linux/security/advisories/2006_52_php.html | vendor-advisory x_refsource_SUSE |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://www.php.net/release_5_1_5.php | x_refsource_CONFIRM x_transferred |
| http://secunia.com/advisories/21768 | third-party-advisory x_refsource_SECUNIA x_transferred |
| http://www.ubuntu.com/usn/usn-342-1 | vendor-advisory x_refsource_UBUNTU x_transferred |
| http://secunia.com/advisories/22039 | third-party-advisory x_refsource_SECUNIA x_transferred |
| http://www.mandriva.com/security/advisories?name=MDKSA-2006:162 | vendor-advisory x_refsource_MANDRIVA x_transferred |
| http://www.securityfocus.com/bid/19582 | vdb-entry x_refsource_BID x_transferred |
| http://secunia.com/advisories/21546 | third-party-advisory x_refsource_SECUNIA x_transferred |
| http://www.vupen.com/english/advisories/2006/3318 | vdb-entry x_refsource_VUPEN x_transferred |
| http://secunia.com/advisories/21842 | third-party-advisory x_refsource_SECUNIA x_transferred |
| http://www.novell.com/linux/security/advisories/2006_52_php.html | vendor-advisory x_refsource_SUSE x_transferred |